Technology
Apple releases security patches for older operating systems following targeted exploits
Updates fix a CoreGraphics vulnerability that Apple says may have been exploited against specific users
The short version
- Apple issued iOS 26.7.1 alongside fixes for iPadOS 26 and macOS 26 to patch a CoreGraphics security flaw.[9to5Mac · TechCrunch]
- The vulnerability, identified as CVE-2026-86950, permits arbitrary code execution when processing maliciously designed files.[9to5Mac]
- Nearly four in five iPhone owners still operate iOS 26, leaving unpatched devices exposed.[TechCrunch]
- Devices already upgraded to iOS 27 are unaffected by the exploited flaw, though older systems require the update.[9to5Mac · TechCrunch]
Key facts
- Apple released iOS 26.7.1 to address a CoreGraphics flaw affecting older iPhone and iPad models.[9to5Mac]
- The bug, cataloged as CVE-2026-86950, is an out-of-bounds write issue credited to Meta Product Security.[9to5Mac]
- Processing maliciously crafted files could trigger arbitrary code execution on vulnerable devices.[9to5Mac]
- Apple acknowledged reports that the flaw may have been exploited in sophisticated attacks aimed at specific individuals on versions preceding iOS 27.[9to5Mac · TechCrunch]
- Company statistics indicate that almost four in five iPhone users still run iOS 26.[TechCrunch]
- Hardware running iOS 27, iPadOS 27, and macOS 27 is unaffected by the bug under attack.[TechCrunch]
What remains uncertain
- Apple noted reports that the vulnerability may have been exploited in targeted attacks, but the exact extent or nature of those alleged attacks remains unverified.[9to5Mac · TechCrunch]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.